admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-09-15 14:04:00 +00:00
parent 334d3b725b
commit 3b4593d249
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
server/AyaNova/biz/ReportBiz.cs
View File

@@ -400,8 +400,7 @@ namespace AyaNova.Biz
log.LogDebug($"Preparing page: adding this report's scripts, style and templates to page"); log.LogDebug($"Preparing page: adding this report's scripts, style and templates to page");
//add report pre-render, helpers and style //add report pre-render, helpers and style
//TODO: Add code to vet / evaluate these scripts and see if they are safe and contain valid methods expected
if (string.IsNullOrWhiteSpace(report.JsPrerender)) if (string.IsNullOrWhiteSpace(report.JsPrerender))
{ {
report.JsPrerender = "async function ayPrepareData(reportData){return reportData;}"; report.JsPrerender = "async function ayPrepareData(reportData){return reportData;}";
@@ -410,7 +409,7 @@ namespace AyaNova.Biz
if (!string.IsNullOrWhiteSpace(report.JsHelpers)) if (!string.IsNullOrWhiteSpace(report.JsHelpers))
await page.AddScriptTagAsync(new AddTagOptions() { Content = report.JsHelpers }); await page.AddScriptTagAsync(new AddTagOptions() { Content = report.JsHelpers });
if (!string.IsNullOrWhiteSpace(report.Style)) if (!string.IsNullOrWhiteSpace(report.Style))
await page.AddStyleTagAsync(new AddTagOptions() { Content = report.Style }); await page.AddStyleTagAsync(new AddTagOptions() { Content = report.Style });